Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
File: 435CoUa5C6fNMxrWoT7vHaL7pEA.mft (raw, json)
Hash identifier: TRdMiEHv8fPoaXDxmzb+onNm5M8M/NyUxNTXngG/Mqg=
Subject key identifier: 23:D6:DB:11:3A:B6:7E:96:43:29:F1:46:80:BE:E0:10:1A:8B:82:B6
Authority key identifier: E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
Certificate issuer: /CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Certificate serial: 01A0CC6C55010F1232D452BEB642FBF4ED0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
Manifest number: 0C76
Signing time: Wed 23 Sep 2026 04:00:46 +0000
Manifest this update: Wed 23 Sep 2026 04:00:46 +0000
Manifest next update: Thu 24 Sep 2026 04:00:46 +0000
Files and hashes: 1: 435CoUa5C6fNMxrWoT7vHaL7pEA.crl (hash: 5lr4lSoND6Ti1AvxvKF7ZQX8EpEO8zytVCVNEStTtPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:55:01:0f:12:32:d4:52:be:b6:42:fb:f4:ed:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Validity
Not Before: Sep 23 04:00:46 2026 GMT
Not After : Sep 24 04:00:46 2026 GMT
Subject: CN=23d6db113ab67e964329f14680bee0101a8b82b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e2:9f:9d:4b:62:c7:36:45:89:92:49:fa:e5:
54:a4:ec:3b:98:b0:3e:53:e2:8d:7c:2c:fc:7c:f9:
23:e8:1c:9b:86:41:92:6c:53:cc:6c:a4:fe:9d:56:
1f:ff:cd:98:be:ce:f6:17:53:30:66:b2:53:23:c7:
f4:21:93:d9:c0:27:75:77:3b:a8:39:10:9e:07:94:
3c:57:87:23:6f:17:f4:7c:e7:7e:88:4b:1e:04:4d:
35:79:0e:9a:f4:fa:91:a7:63:4c:2e:43:7a:9d:69:
be:7d:4f:d5:3a:59:9d:ff:db:1a:65:5f:f8:78:ee:
e3:a9:e5:c1:99:6b:0e:38:28:8c:59:9e:f7:e6:16:
54:3b:27:74:68:74:dd:2d:59:e0:de:bd:49:7d:5f:
4c:f0:a7:81:54:27:f5:07:a2:94:91:80:3e:37:e1:
fe:1c:55:39:12:ee:55:64:b0:e7:a5:65:91:ca:f2:
e1:ee:52:86:0b:66:82:50:e3:49:68:39:46:16:09:
0f:ff:9a:23:ea:16:d1:11:26:2c:41:02:1b:3a:cd:
a7:eb:cb:11:29:27:53:0f:32:bb:6c:23:ae:c3:e8:
cb:62:c2:6e:40:a9:ff:59:24:30:53:f6:42:ba:43:
2b:89:1c:e5:7d:2a:06:c7:12:90:e2:65:ef:27:a7:
95:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D6:DB:11:3A:B6:7E:96:43:29:F1:46:80:BE:E0:10:1A:8B:82:B6
X509v3 Authority Key Identifier:
keyid:E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a5:bd:26:53:97:a2:dd:b8:13:6c:07:c1:4e:86:2b:ac:49:
98:45:37:9c:4f:4d:df:c3:35:2b:b5:ce:6c:76:4c:6e:23:9e:
95:b4:5c:7a:9d:f9:cc:e6:23:17:3b:b4:c6:83:5b:2e:09:05:
9c:22:25:20:94:9a:ad:6e:ef:fa:aa:0c:d1:fe:e1:72:eb:69:
7a:fc:71:d2:8d:75:a8:22:ab:3a:8b:5a:da:c9:5c:1b:2f:5b:
cb:8f:fc:ce:56:01:fa:1e:01:a1:b1:9e:e5:1c:61:c4:88:2c:
3c:e6:e4:20:d3:af:15:4c:cc:74:0a:71:67:76:c2:99:f7:00:
ad:19:45:e7:b9:d9:7b:2b:39:2f:41:8a:29:b4:13:d1:43:e3:
34:d0:e3:37:03:03:0d:cf:52:da:f6:ef:b3:96:30:9a:74:f0:
b4:1f:21:9b:9d:63:db:3a:92:9c:f5:a6:6f:2c:e9:bd:da:ff:
13:90:d3:1f:94:71:3e:59:b3:e5:25:93:d3:90:b0:24:01:66:
5a:23:bb:33:44:83:2d:70:b2:5d:96:d8:58:ab:f0:ce:9e:ae:
60:a6:e7:14:1d:7e:9f:ef:84:47:c0:98:f9:73:7c:65:55:79:
99:f0:00:d7:92:33:5a:32:0b:49:e3:7b:d7:c6:83:0c:2e:af:
19:1c:16:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:38:36 2026 by rpki-client